Pre-Con Ed: CA Live API Creator: How to Create, Deploy, Secure and Scale an Enterprise API in 30 Minutes

World®
’16
Asurion Unbundles the Monolithic
Platform for the Omni Channel Approach
Vijay Alagarasan - Principal Architect, Enterprise Architecture and Technology Strategy
Asurion
DO3T09S
DEVOPS

2 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
© 2016 CA. All rights reserved. All trademarks referenced herein belong to their respective companies.
The content provided in this CA World 2016 presentation is intended for informational purposes only and does not form any type of
warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.
For Informational Purposes Only
Terms of this Presentation

Abstract
Everyone talks about APIs and how they can transform a business. But where are these APIs
supposed to come from? The state of the art for API creation is still overwhelmingly code-
intensive, and therefore slow, expensive and error-prone. For many types of enterprise systems,
there is a (much) better way.
In this session, you will learn:
• How to create an enterprise-class API from scratch using CA Live API Creator in just a few
minutes
• How to combine pre-defined data sources, such as Oracle, SQL Server and Salesforce, with
custom databases and arbitrary data
• How to shape your API and give it some logic and security
• How to make your API available at enterprise scale And, because nothing in this life is fixed:
• How to update this API in no time flat
This is a practical session: everything will be cooked live before your eyes. No cheating! At the
end of the session, you'll be given an evaluation copy of CA Live API Creator so that you can try it
in your own business. If you still think creating an API is difficult, this may be the session for you.
Vijay
Alagarasan
Asurion
Principal Architect,
Enterprise Architecture
and Technology
Strategy

Agenda
ABOUT ASURION
OPPORTUNITIES AND CONSTRAINTS
KEY TAKEAWAYS
UNBUNDLING HORIZON PLATFORM
RULES AND PATTERNS
PLATFORM AT SCALE FOR 2017
1
2
3
4
5
6

Asurion’s continuous innovation is helping 290M customers globally stay
connected while driving loyalty to our partners’ brands.
• Founded in the mid 1990’s, Asurion has been serving the communications and retail industries for over 20 years
• Based in Nashville, Tennessee, Asurion has over 17,000 associates worldwide
• Serving more then 290 million consumers globally through our operations in 18 countries:
• Asurion is privately-held with annual revenues in excess of $5.8 billion
• Our management team comes from best-in-class companies with experience across mobile, wireline telecom, logistics, insurance, service contracts,
consulting, customer care, marketing, retail and more
• Asurion partners with the worlds leading mobile carriers, retailers cable satellite and cable providers.
North America
• Global Headquarters
• 15 Corporate Owned
Call Centers
• Logistics Center
South America
• 2 Corporate Offices
Europe
• 1 Corporate Owned Call Center
Asia Pacific
• Logistics Center
• 2 Corporate Owned Call
Centers
• Australia
• Brazil
• Canada
• China/Hong-Kong
• Colombia
• England
• France
• Israel
• Japan
• Korea
• Malaysia
• Mexico
• Philippines
• Peru
• Singapore
• Taiwan
• Thailand
• United States
Expanding Global Presence
Corporate Overview

Asurion – What We Do
§ White Label Technology Protection Service
§ Premier Tech Support for Mobile, Tablets, Laptops
§ Post Sales warranty support
§ Device Leasing and Upgrade
§ Extended warranty for Retail Products
§ Direct Service and OEM Support
§ Contact Center tech support as a Service

Opportunities
Efficiency
Innovation
Customer
Reach
Partner
Opportunities
Omni
Channel
Security
Mobile
IoT
Drive Customer Growth
Drive Customer Engagement
Reduce customer churn
Improve Operational Efficiency
Reduce Risk
=
Business Objectives

Constraints With Tightly Bundled Platform
§ B2B/A2A integration complexity
§ Diverse/Disparate technology stacks
§ Operational visibility
§ Inconsistent Security
§ Service performance monitoring
§ Service documentation and discovery
§ Lots of manual cross teams
collaborations
§ Limited reusability

Unbundling Needed for the Omni Channel Approach
Capabilities as Microservices
Finance and
Accounting
Digital
Protection
Incident
Management
Account
Management
Capabilities Published as APIs
Logistics and
Fulfillment
Risk
Management
Channel
Application
Channel
Application
Channel
Application

Horizon Platform in 2015
Agent Platform
Horizon Services Layer
Enterprise Data Model
Incident
Management
Risk
Management
Account
Management
Integration
Services
External Entities
Supply Chain PartnersFinance
Horizon Claims Platform

Horizon Claims Platform
Agent
Horizon Claims Platform in Early 2016
APIs to Enable Omni Channel Approach
Horizon Services Layer
Enterprise Data Model
Incident
Management
Risk
Management
Account
Management
Integration
Services
External Entities
CA API Management
[Access Control, Throttling, Registry, Versioning, Routing, API Analytics]
Web IVRMobile

Horizon Platform Work in Progress
Be Adaptive for Omni Channel Demands via Microservices and APIs
External Entities
CA API Management
[Access Control, Throttling, Registry, Versioning, Routing, API Analytics]
Horizon Platform
Incident Schema
Incident
Management
Risk
Management
Account
Management
System APIs
Risk Database
Customer
Schema

Web Channel
IVR
AVA
Asurion Virtual Assistant Platform
Innovation via Research Labs https://www.asurion.com/about/research-labs/
CAAPIManagement

The 8 Rules of API Management
API Gateway is lightweight
APIs are published with documentation
API Methods are accessed only by authorized consumers
API lifecycle must be managed
API Gateway availability
API Gateway is performant
API Resources are uniquely addressable
APIs are monitored for utilization and behavior
1
2
3
4
5
6
7
8

Types of APIs
Private API Partner API

Authorization
Authentication
Authentication and Authorization
Security is Priority 1
API Key
Active
Directory
Certificates

Threat Protection
Protect Your Assets and Maintain Credibility
Untrusted network
Corporate Internal
Internet
Request Filtering
Throttling
Authentication
API Key Authorization
Transformation
Partner Gateway Backend Services
Protect Against SQL Attack
Protect Against Code Injection
Protect Against Document structure threats

Routing
Diverse and Disparate Services Exposed Consistently
REST
SOAP/JMS
SOAP/HTTPS
SOAP/HTTPS
XML/HTTP
SOAP/HTTPS

Rate and Quota Limiting
Ditch Denial of Service Attacks
API
Consumer
API Plans
Rate Limit
Quota
Limit
Rate Limit
Quota
Limit
API Backend
• Front end throttling
• Configured via API
development portal
• Cluster wide
• Back end throttling
• Configured via API
Policy for every API
• Per node

Documentation
Become Self Service
Rich Catalog of Asurion capabilities
ready and available
§ Clear interactive documentation
§ Browser-based exploration of APIs
§ Easy consumption of business
functions by business users
directly from Office automation
products
REST-based API interactions
§ Consistent interaction patterns,
protocols and message formats
regardless of provider
§ Standard HTTP status codesTry it out!
Choose your
output format!
Self-service sign-up and
consumption!

API Management Status
65
as of 09/07/2016
1M
in the last 24 Hour
7.5M
in the last 7 days
14
as of 09/07/2016
8
as of 09/07/2016
Private APIs API Hits API Hits
API Consumers API Provides
5
as of 09/07/2016
Partner APIs
99.93%
in the last 24 hour
Availability
4
as of 09/06/2016
Channels

Spoke
Platform at Scale for 2017
Federated Gateway Model
Hub
API Portal
API GatewayAPI Gateway
Spoke
API Gateway
Spoke
API Gateway
• Adopting container technology for scaling
• Improve platform resiliency and eliminate single point of failures
• Invest in Automation
Synchronize API Plans,
Keys, Account plans
from hub to Spoke

On Day 1, establish principles and guidelines to use API Management
Understand CA API management infrastructure best practices
Develop policy fragments (templates) to build API services, an easy way to implement standards and best
practices
Have an API versioning strategy
Develop and showcase reference implementation for different styles
Federate the API delivery with centralized operations and code governance
Train and develop existing resource’s skillset early in the cycle as part of the API program
Key Takeaways
If you want to run fast, run alone; if you want
to run far, take the organization with you.
If you can’t execute the strategy, it doesn’t
matter how good your strategy is..

Thank you.
Vijay Alagarasan
Principal Architect
Enterprise Architecture and Technology Strategy
Asurion, Nashville, TN
www.asurion.com
Vijay.alagarasan@asurion.com
https://www.linkedin.com/in/vijayalagarasan

DevOps – API Management and
Application Development
For more information on DevOps – API Management and
Application Development, please visit: http://cainc.to/DL8ozQ

Pre-Con Ed: CA Live API Creator: How to Create, Deploy, Secure and Scale an Enterprise API in 30 Minutes

More Related Content

What's hot (20)

Viewers also liked (17)

Similar to Pre-Con Ed: CA Live API Creator: How to Create, Deploy, Secure and Scale an Enterprise API in 30 Minutes (20)

More from CA Technologies (20)

Recently uploaded (20)

Pre-Con Ed: CA Live API Creator: How to Create, Deploy, Secure and Scale an Enterprise API in 30 Minutes